Senior Security Engineer (Security Champion), Runtimes

In this role you implement security as a built-in part of shipping code for Kong’s AI and API Gateways. You work across the Runtimes team to align security with product goals, shaping how enterprises securely route intelligence. You will confront emerging AI/LLM threat patterns and drive practical security improvements in design, code, and reviews. This role offers hands-on coding, threat modeling, and collaboration with cross-functional teams to reduce risk at scale.

• Equity
• Bonus
• Health insurance (medical, dental, vision)
• Paid holidays
• PTO
• Professional development opportunities

• Conduct security-focused code audits, threat modeling, and secure design reviews for AI Gateway and API Gateway features
• Own end-to-end vulnerability management: triage, reproduce, remediate, verify
• Collaborate with AI Gateway engineering on new threat patterns (prompt injection, data leakage, model abuse)
• Coach engineers on secure coding practices and turn findings into durable team habits
• Contribute hands-on to Gateway feature work with security baked in from Day 1

• 3+ years building production software
• 2+ years in a dedicated security role (AppSec, vulnerability research, or pentesting)
• Solid coding skills in an object-oriented language (Rust, Java, Python, Go, or similar)
• Practical threat-modeling experience
• Working knowledge of cybersecurity (L7 security and authentication)
• Basic knowledge of AI attack vectors

• Coaching and mentoring engineers
• Strong collaboration across teams
• Proactive security mindset
• Object-oriented programming (Rust, Java, Python, Go)
• Threat modeling
• L7 security and authentication